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AMENDMENTS TO THE CLAIMS 
This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

Listing of claims: 

1 . (currently amended) A method for validating credentials comprising: 
determining, at a first system that grants session credentials, that a client does not 

have a valid session credential fef granted by the first system; 

retrieving, at the first system, information fi-om a session token held by the client, 
the information corresponding to a possible session credential for a second system that grants 
session credentials : 

presenting at least some of the information fi-om the session token to the second 

system; and 

determining whether the client has a valid session credential with granted by the 

second system. 

2. (currently amended) A method according to claim 1, fiirther comprising 
granting a session credential to the client en by the first system, after determining that the client 
has a valid session credential fer granted bv the second system. 

3. (currently amended) A method according to claim 1 , fiirther comprising 
sending a session token to the client, the token corresponding to ^ a session credential ea 
granted bv the first system. 



4. (currently amended) A method according to claim 1, fiirther comprising 
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directing the client to the second system to establish a session credential, after determining that 

the client does not have a valid session credential fef granted bv the second system. 

5. (currently amended) A method according to claim 1, further comprising 
directing the client to the first system to establish a session credential, after determining that the 
client does not have a valid session credential fef granted bv the second system, 

6. (currently amended) A method according to claim 1 , further comprising 
maintaining the client session credential wth granted bv the second system. 

7. (currently amended) A method according to claim 1, wherein determining 
whether the client has a valid credential wth granted bv the second system is at least partially 
from presenting at least some of the information from the session token. 

8. (original) A method according to claim 1 , wherein retrieving information 
from the session token held by the client comprises: 

sending a query to the client from the first system, the query including 
identification as originating from a domain name corresponding to the second system; and 
receiving a response to the query. 

9. (currently amended) A method for validating session credentials of a client 

comprising: 

determining, at a first system that grants session credentials, that a client does not 
have a valid session credential f&f granted bv the first system; 
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retrieving, at the first system, information from a session token held by the client, 
the information corresponding to a session credential for a second system that grants session 
credentials, wherein retrieving information from the session token held by the client comprises 
receiving a session token from the client corresponding to the second system; 

presenting at least some of the information from the session token to the second 

system; 

determining whether the client has a valid session credential ^^4th granted by the 
second system, wherein determining whether the client has a valid credential wife granted by the 
second system is at least partially from presenting information from the session token; 

granting a session credential to the client on the first system, after determining 
that the client has a valid session credential f&f granted by the second system; 

sending a session token to the client, the token corresponding to the session 
credential en granted bv the first system; and 

maintaining the client session credentials. 

10. (currently amended) Computer executable software code transmitted as an 
information signal, the code for validating credentials, the code comprising: 

code to determine, at a first system that grants session credentials, that a client 
does not have a valid session credential fef granted by the first system; 

code to retrieve, at the first system, information from a session token held by the 
client, the information corresponding to a possible session credential for a second system that 
grants session credentials : 

code to present at least some of the information from the session token to the 
second system; and 
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code to determine whether the client has a valid session credential wiSi granted by 
the second system. 

1 1 . (currently amended) A computer readable mediimi having computer 
executable code stored thereon, the code for validating credentials, the code comprising: 

code to determine, at a first system that grants session credentials , that a client 
does not have a valid session credential fef granted bv the first system; 

code to retrieve, at the first system, information fi-om a session token held by the 
client, the information corresponding to a possible session credential for a second system that 
grants session credentials ; 

code to present at least some of the information fi'om the session token to the 
second system; and 

code to determine whether the client has a valid session credential wi^ granted bv 
the second system. 

12. (currently amended) A programmed computer for validating credentials, 

comprising: 

a memory having at least one region for storing computer executable program 

' code; and 

a processor for executing the program code stored in the memory, wherein the 
program code comprises: 

code to determine, at a first system that grants session credentials, that a client 
does not have a valid session credential fef granted bv the first system; 

code to retrieve, at the first system, information firom a session token held by the 
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client, the information corresponding to a possible session credential for a second system that 

grants session credentials : 

code to present at least some of the information from the session token to the 

second system; and 

code to determine whether the client has a valid session credential wfe granted bv 
the second system. 

13. (currently amended) A method for establishing session credentials 

comprising: 

determining that a client does not have a valid session credential fer granted bv a 
first system or a second system; 

sending, from the first system to the client, a log in page; 

receiving, at the first system from the client, log in information; 

sending, from the first system to the second system, the log in information; and 

receiving, at the first system from the second system, information corresponding 
to a session credential fer granted bv the second system, the session credential granted by the 
second system based at least in part on the log in information. 

14. (currently amended) A method according to claim 44 13, ftirther 
comprising granting a session credential for the first system. 

15. (currently amended) A method according to claim 4+ 13, ftirther 
comprising granting a session credential for the second system. 
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16. (currently amended) A method according to claim 44 13, further 
comprising associating session credentials for the first system and the second system with the 
client. 

17. (currently amended) A method for establishing session credentials 

comprising: 

determining that a client does not have a valid session credential fef granted by a 
first system or a second system; 

sending, from the second system to the client, a log in page; 

receiving, at the second system from the client, log in information; and 

sending, from the second system to the first system, information corresponding to 
a session credential far granted by the second system, the session credential granted by the 
second system based at least in part on the log in information; and 

granting a session credential for the first system. 

1 8. (original) A method according to claim 1 7, further comprising granting a 
session credential for the second system. 

19. (original) A method according to claim 1 7, further comprising associating 
session credentials for the first system and the second system with the client. 

20. (currently amended) A method for validating credentials comprising: 
determining, at a first system that grants session credentials, that a client does not 

have a valid session credential f&f granted by the first system; 
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redirecting the client to a second system that grants session credentials : 

sendmg, from the second system to the first system, session credentials fef granted 
by the second system; 

sending, from the first system to the second system, the session credentials fef 
granted by the second system; 

determinmg, at the second system, that the session credentials l» granted by the 
second system, and received from the first system, are valid; and 

sendmg, from the second system to the first system, information indicating that 
the session credentials fef granted by the second system are valid. 

2 1 . (original) A method according to claim 20, fiirther comprising granting the 
client session credentials for the first system. 
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